Dynamic handle configuration is the easiest choice. Basically build a DHCP shopper on the public interface.The primary rule accepts packets from previously proven connections, assuming they are safe to not overload the CPU. The 2nd rule drops any packet that relationship monitoring identifies as invalid. After that, we create usual acknowledge regu